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Abstract 

Two methods for control system reconfiguration have 
been investigated. The first method is a robust 
servomechanism control approach (optimal tracking 
problem) that is a generalization of the classical 
proportional-plus-integral control to multiple input- 
multiple output systems. The second method is a 
control-allocation approach based on a quadratic 
programming fonnulation. A globally convergent fixed- 
point iteration algorithm has been developed to make 
onboard implementation of this method feasible. These 
methods have been applied to reconfigurable entry flight 
control design for the X-33 vehicle. Examples presented 
demonstrate simultaneous tracking of angle-of-attack 
and roll angle commands during failures of the right 
body flap actuator. Although simulations demonstrate 
success of the first method in most cases, the control- 
allocation method appears to provide uniformly better 
performance in all cases. 

Nomenclature 

A state plant matrix 

b elements of B 

B control plant matrix 
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C state output matrix 

CA control allocation 

d disturbance vector 

d x input to aircraft caused by jammed surface w 

D control output matrix 

e error 

E disturbance (jammed surface) matrix 

F output disturbance matrix 

h elements of H 

H arbitraiy variable 

i arbitraiy integer 

I identity matrix 

j j th component 

J cost function 

K gain 

1 1 space; the vector space of all n vectors 

L lower 

m m space; the vector space of all n vector s 

n n space; the vector space of all n vectors 

p p space; the vector space of all n vectors 

Pi-servo robust servomechanism design 
q q order 

Q weighting matrix 

r desired output 

R real 
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s 


saturator 


t time 

u control input vector 

u remaining working control surface vector 

U upper 

v velocity, ft/sec 

w disturbance or position of jammed surface 

x state vector 

y output (observation) vector 

z output choice 

a angle of attack, deg 

P sideslip angle, deg 

y elements of T 

r lower companion matrix form 

§ perturbation 

8 lb j left body flap deflection, deg 

8 ; ■ left inboard elevon deflection, deg 

S /f , l left outboard elevon deflection, deg 

8 /t left vertical rudder deflection, deg 


b rh j right body flap deflection, deg 
8 ■ right inboard elevon deflection, deg 

8 right outboard elevon deflection, deg 

8 right vertical rudder deflection, deg 

e near to zero as deshed 

C, damping 

T| scalar weighting 

0 pitch angle, deg 

X eigenvalues 

<j) roll angle, deg 

cp heading angle, deg 

Introduction 

The X-33 vehicle is a one-half-scale suborbital 
prototype for the proposed single-stage-to-orbit reusable 
launch vehicle. In flight tests, the X-33 vehicle will 
accelerate to a maximum speed of Mach 1 3 and climb to 
an altitude of approximately 250k ft. The entry flight 
immediately follows a short transition phase after 
tite ascent. 

The X-33 veliicle (fig. 1) has four types of control 
surfaces: rudders (8 nr and 8^ f ), body flaps ( 8 rfj j 



Vertical rudders 

• Rudders: 60° outboard and 30° inboard 

deflection 

• Electromechanical actuators 

• Function: yaw control and pitch trim bias 


Elevons 

• Inboard and outboard 

elevons: ± 25 ’ 

• Electromechanical actuators 

• Function: pitch control and 

roll control at all speeds __ 


Body flaps 

• Electromechanical actuators 

• Pneumatic load assist device 

• Flaps: -15°, 26° 

• Function: pitch control at all speeds, 


yaw control and entry 


990113 


Figure 1. The X-33 vehicle. 
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and ), and inboard (8 rgv( and 8 /gV( -) and outboard 
(8 and 8j ) elevons. Each of tlie eight surfaces 
can be independently actuated, with one actuator for 
each surface. All the aerosurfaces will use 
electromechanical actuators. The body flaps also have an 
pneumatic load assist device that can be used for a total 
of 40 sec during ascent or entry. 

Analysis has shown that although the probability for 
an actuator failure is very low, when it does happen, the 
failure would most likely result in jamming (freezing) of 
tlie associated aerosurface. 1 The eight control surfaces 
have control power capable of providing redundant 
pitch, roll, and yaw restoring moments such that if one 
surface fails, tlie potential exists for an alternate control 
scheme that will maintain control of the vehicle. 

The control system problem statement for the X-33 
project is posed as this: If a single control surfaces fails 
(jams, floats, or runs away), can the nominal or 
reconfigurable controller be used to land the vehicle 
safely? The nominal controller has some inherent 
robustness and may be able to handle a limited failure 
set (such as a left rudder jammed at 3°). The 
reconfigurable controller should have a much larger 
region of survivable failure conditions. 

Flight control system reconfiguration encompasses a 
set of methodologies concerned with making changes to 
adapt to system failures and damages. The adaptation 
can be in forms of control system gam changes or 
control law structure changes. Reconfigurable control 
offers the potential of significant enhancement of flight 
safety and mission success rate. Because of its clear 
benefits in both military and civil applications, flight 
control reconfiguration research has received 
considerable attention in recent years, exemplified by 
tlie U. S. Air Force Reconfigurable Control for Tailless 
Fighter Aircraft (RESTORE) program, 2 flight test of the 
F-16 Variable Stability In-Flight Simulator Test Aircraft 
(VISTA), 3 and the NASA X-33 program. 1 
Reconfigurable control laws are baselined (onboard 
software) for the X-33 program. The references 
contained in reference 2 also provide a glimpse of some 
previous investigations on this subject. 

Control reconfiguration consists of two main steps. 
The first step is failure detection and isolation that 
identifies where the failure occurs and to what extent. 
The second step involves adjusting the controller or 
control law to compensate for the failure. NASA has 
played an integral part in the development of the X-33 
control laws, and as part of that effort, several 
reconfigurable control approaches have been developed 
and evaluated. 


This research study focuses on the control law 
modification, assuming that tlie aircraft is fitted with 
smart actuators so that any locked control surfaces can 
be detected and the locked position identified if 
necessary. The objective of this work is to seek 
reconfigurable control system designs that are easily 
implementable in flight software, reliable, and offer 
assurance of flight safety and mission success for the 
targeted types of failures. The reconfigured control 
system is expected to maintain aircraft stability should a 
control surface failure occur, and to provide reasonable 
command-tracking performance. 

Two reconfigurable approaches are investigated and 
evaluated in this paper. One is tlie robust 
servomechanism design (Pi-servo), 4, 5 which is a 
generalization of the classical proportional-plus-integral 
design. In this approach, tlie effect of the jammed 
surface is treated as a disturbance to tlie system. The 
robust servomechanism controller is designed to 
stabilize tlie aircraft, balance tlie jammed surface 
(disturbance rejection), and provide command tracking. 

The second approach is based on a control-allocation 
(CA) approach in which a satisfactory nominal control 
law is first designed for tlie healthy aircraft to produce 
the desired aircraft response. In the event of a jammed 
surface, the redundant degrees of freedom of the control 
effectors are used to distribute the deflections of the 
operable surfaces in an optimal way so as to cancel tlie 
influence of the jammed surface and reproduce, as 
closely as possible, the desired aircraft response 
to commands. 

This paper presents results of applying these two 
reconfigurable methodologies to the X-33 entry flight. 
The first approach is simple to implement and able to 
stabilize and control the vehicle within the vehicle’s 
capability to retrim hi the presence of the jammed 
surface. The second approach requires slightly more 
onboard computation, but provides good, uniform 
performance. 

The paper also reviews the methodology for tlie 
Pi-servo and introduces the CA method and its quadratic 
programming problem. The Control- Allocation 
Reconfiguration section describes a fixed-point iteration 
algorithm suitable for onboard implementation for the 
associated quadratic programming problem. Results 
cover the application of the two methods to 
reconfigurable entry flight control of the X-33 vehicle 
and tlie evaluation of the performance. In the case of the 
Pi-servo results, the nominal no-failure case is presented 
for further evaluation. Use of trade names or names of 
manufacturers in this document does not constitute an 
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official endorsement of such products or manufacturers, 
either expressed or implied, by the National Aeronautics 
and Space Administration. 

Robust Servomechanism 
Reconfigurable Design Problem 

The Pi-servo problem is concerned with control of a 
dynamic system to achieve asymptotic tracking of 
desired output states and rejection of unmeasurable 
disturbance! s). For single input-single output systems, 
the problem has been well-understood for 50 years. 
However, this problem has been solved for multiple 
input-multiple output systems only in the last two 
decades, hi the following development, an alternate 
version of the problem is introduced and the controller 
design methodology is presented. 3, 4 

Problem Formulation 


objective of the control design is to find a feedback 
controller such that: 

• the closed-loop system is stable. 

• the error e(t) = r(t) — y(/) approaches 0, as time goes 
to infinity, in the presence of the immeasurable 
disturbance w(t). 

• the closed-loop system is robust in the sense that as 
long as the system remains stable, asymptotic 
tracking of r and rejection of w are maintained in 
the presence of system parametric uncertainty or 
even variations in the order of the dynamics. 

Robust Servomechanism Design Methodology 

A dynamic controller will be designed to meet the 
above stated objectives. The controller dynamics are set 
to be 


Consider a linear, time-invariant, multiple input- 
multiple output system, 

x = Ax + Bu + Ew and (1) 


* c = A c x c + B c ( r -y)’ ( 5 ) 

where x c e R p<1 is the controller state, and 
A c e R pqxpq = block diag [T, ..., T] with 


y = Cx + Du + Fw, (2) 

where x e R 1 ' is the plant state vector, u e R m is the 
plant input vector, w e R is the disturbance vector, and 
y 6 R p is the controlled output with p < m . Let 
re R p represent the desired output. The problem of 
control surface failure can be considered in the 
framework through the w vector. Specifically, u 
represents the input resulting from any one surface 
failed at a given position. Assume r and vv ate 
continuously differentiable q times, and the real scalers 
a and q exist such that: 


F = 


0 

0 


1 0 ... 0 

0 1 ... 0 


0 0 
-a„ -a 


0 1 


q - 1 


e R 


qxq 


and B e R pq x q = block diag [y, . . ., y] with 


(6) 


+ oijr^ IJ + ... + a q jf + a q r = 0 and (3) 

W (q) + a lW (q lj + ... + a q jfi- + a q w = 0, (4) 

with q > 1 . Note that the above formulation 
encompasses many commonly used signal forms, 
including constants (when q = 1 and a i = 0 ); 
polynomials (when a i = 0, i = 1, ...q); sinusoidal 
functions (when q = 2, a { = 0 and a 2 >0); and 
exponential functions. The initial conditions for vv ate 
assumed to be arbitrary; therefore, w(i) is considered 
unknown (unmeasurable). In a general formulation, the 
dynamics of r(l) and w(t) do not have to be the same,' 1 
but for simplicity, they are assumed to be the same here 
(which is adequate for the subject of this paper). The 


0 

1 


(7) 


Consider the open-loop system including the plant 
(eq. (1)) and the controller dynamics (eq. (5)): 


X 


A 

0 

X 

+ 

B 

X c 


B c C 

o 

< 

X c 


-B C D 


Let Xj, . . ., X, be the roots of the polynomial 

X^ + ctjX/ 1 1 + ... + a q jA,+ a q = 0. 
If tlie following condition is satisfied: 


4 

American Institute of Aeronautics and Astronautics 



rank 


\l - A B 
-C D 


= n + p, i = 1, (9) 


then the augmented system (eq. (8)) is controllable. 4, 5 
Hence, a control law 


u = kx + k c x c 


( 10 ) 


model prior to failure). Now the problem is cast into 
the formulation in the previous section and a 
proportional-plus-integral controller (eq. (10)) can 
be designed by linear quadratic regulator or 
pole-placement methods to stabilize the aircraft, 
reject the influence of the jammed surface, and track 
commands. References 3 and 4 provide more 
complete discussion and detail. 


exists such that the closed-loop system is stable. 
Furthermore, for any such control law, asymptotic 
tracking and disturbance rejection are achieved; that is, 
e = r - y — > 0 for any initial condition x(0) and any vc 
satisfying equation (4). The closed-loop system 
possesses robustness in that for any perturbations 
in { A, B, C, D, B , k, k }, asymptotic tracking and 
disturbance rejection still hold as long as the closed-loop 
system remains stable and B remains block 
diagonal. 4, 5 

The following remarks are applicable for this 
derivation: 

• If the augmented system (eq. (8)) is controllable, 
the control law (eq. (10)) can be conveniently found 
by applying the linear quadratic regulator approach 
to equation (8). 

• In the special case where r is constant command 
and w is constant (but possibly unknown) 
disturbance, q = 1 and a , = 0. Therefore, A c = 0 
and B c = I pxp according to their definitions. The 
controller dynamics (eq. (5)) show that 
x c = J ( r — v ) d/ = je d/ . Thus, the control law 
(eq. (10)) is simply a proportional-plus-integral 
control law, which is well-known in classical single 
input-single output control theory. But the current 
formulation is much more general in that it applies 
to multiple input-multiple output systems and 
allows tracking of time-vaiying commands and 
rejection of disturbances. 

• This Pi-servo conveniently applies to control of 
impaired aircraft with one or more jammed control 
surfaces. Suppose that the dynamic model (eq. (1)) 
represents the linearized dynamics of such an 
aircraft at a trim condition. Let vv in equation (1) 
denote the (constant) position of the jammed 
surface, and u denote all the remaining operable 
surfaces (the exact value of vv does not need to be 
known with this method). The matrix E (a column 
vector hi this case) is then the control derivatives 
associated with the surface now jammed (or 
equivalently, the column corresponding to the 
jammed surface in the B matrix of the linearized 


Control- Allocation Reconfiguration 

Control allocation is concerned with distributing the 
deflection commands of multiple control surfaces of the 
aircraft to generate required control responses (for 
example, pitch, roll, and yaw moments) when the 
number of independent control surfaces is greater than 
the number of required independent control responses. 
Reference 6 contains a list of recent work on CA and 
provides several additional approaches to CA based on 
quadratic and linear programming. 

Problem Formulation 

In this section, a control reconfiguration approach 
based on a CA scheme using the quadratic programming 
method is considered. The intent is to use the 
redundancy of the operable control surfaces to 
compensate for the effects of the jammed surface and 
still provide the same (or almost the same) desired 
control responses. Clearly, the greater the control 
redundancy is, the better suited this approach would be. 
This approach requires the position of the jammed 
surface to be known, either through the use of small 
actuator or by estimation. 

Let the linearized dynamics of the normal aircraft at a 
trim condition be given by 

x = Ax + Bu . (11) 

A nominal control law is assumed to have been 
designed based on the model of equation (11) that 
provides satisfactoiy stabilization and command- 
tracking performance for the aircraft. Suppose now that 
one of the control surfaces is suddenly jammed at a 
position w. Rewrite the postfailure state equation of the 
system (eq. (11)) as 

x = Ax + B r u r + ^, (12) 

where u e R m represents the remaining control 
surfaces, d e R n denotes the input to the aircraft 
caused by the jammed surface vv, and d x is known when 
w is known. The variable d is the product of the 
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jammed surface position times the control power Bpe ; 
in other words, the colunm(s) of B represent the 
damaged control times the magnitude of the jammed 
position. Let z = C z x be a selected i-dimensional 
output vector (z e R 1 ) to be used in defining the control 
allocation, and 


z = C z Ax + C z B r u r + C x d x ± A z x + B z u r + d z . (13) 

The choice of z is not necessarily the same as y in 
the Robust Servomechanism Reconfigurable Design 
Problem section, but one that specifies the required 
performance. For instance, one most natural choice of z 
is z = (p r q ) (the roll, yaw, and pitch rates). Other 
choices are also possible, provided the resulting B z 
matrix has no zero rows, hi general, m is required to be 
greater than or equal to i in this approach (that is, the 
number of operable control surfaces is greater than that 
of file controlled variables). At the current state x(t), 
suppose that the nominal control law would have 
produced u* e R'" . Then the desired rate of z would 

be z* = C z Ax + C z Bu*. A u is sought that makes 
B u + d z as close as possible to C z Bu*. Thus, the 
actual z ~ z* ; hence, z remains close to z* , which 
represents desired performance. Such a u ( . can be 
determined by minimization of the following quadratic 
function, 


minj = i[(l-E)(B z u 1 . + d z -C z Bu*) r Q 1 

x(B z u r + d z -C z Bu*) + eu 1 / Q 2 u 1 . ] 
for some small 0 < £ < 1; and subject to 


(14) 


U nnin ~ u r ~ U nnax ’ 


(15) 


u can easily occur. Conversely, any 0 < e < 1 will 
make file Hessian of J positive definite and the solution 
to the quadratic programming problem is unique. But 
clearly £ should be sufficiently small in order for 
B z u,. + d z - C z Bu* = 0. When B z u r + d z - C z Bu* =0, 
file response of the aircraft would be very close to that 
of the healthy aircraft, despite the jamming of a control 
surface. 

Fixed-Point Algorithm 

A reliable, efficient, and simple algorithm is 
necessary for this CA approach to be useful in practice. 
When none of the constraints in equation (15) is active, 
solving the quadratic programming problem is 
straightforward. The solution u r is obtained from the 
unique solution of the linear algebraic system 
3J/3u r = 0, which gives 

u r = (l-B)[(l-E)B^Q 1 B z + EQ 2 f 1 
<0i(C z Bu*-d z ). 

hi general cases where some of the constraints in 
equation (15) are active, the standard quadratic 
programming algoritlims 7 are involved and not suited for 
onboard implementation and applications. Equation (15) 
is a box constraint and requires more computational 
power. But for the special class of quadratic 
programming problems sucli as in equations (14) and 
(15) where only inequality constraints of the simple 
fonn ((eq. 15)) exist, an extremely simple, globally 
convergent fixed-point iteration algorithm can be 
devised for onboard use. This method is described and 
used in reference 7 in a different context. This method is 
applied to the quadratic programming problem (eqs. (14) 
and (15)). 


where Q, and Q 2 are positive definite matrices of 

appropriate dimensions. The u,, ■ and u are the 

lower and upper bounds of the remaining control 
surfaces. 

The minimization of J subject to equation (15) 

constitutes a quadratic programming problem. The tenn 
T 

su r Q 2 u r in equation (14) is a regularization term to 

the quadratic programming problem. Without the 

2 2 

term (e = 0), the Hessian of J, 5 J/3u r = 
<QlB z e R m X m , is not strictly positive definite 
because the rank of B z QjB z e R m x m is at most i, but 
m > i . In this case, the quadratic programming problem 
has no unique solution, and consequently chattering in 


Define a vector saturator s[-] = (sj[-]...s[-]) : 

_m Ti m i_ 

R — > R by 


sjta = 


u j’ ^ u t 

Cj, L j <Cj<U j , j = 1,2, ..., m (17) 

l L i- 


for any £ = (£•[...£) e R m , where for the moment 

Uj = u max , and Lj = u min , set to be equal to the 

upper and iower bound or the j th component of u r , 

T 

respectively. Let H = (1 - e)B z QjB z + eQ-,. Calculate 
file scalar 
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1/2 


n = 


I I b?j 


Li = i j = i J 


(18) 


where h^s are tlie elements of H. Then the solution to 
the quadratic programming problem satisfies the 
following fixed-point equation: 


U j = min Kna Xi > , W A ' + U j('- A ')} (2D 

J J J J 

Lj = max { U mm i ’-Vax A ' + U j( ? - A 0}, (22) 

J J J J 

where Uj(t- At) is the calculated control command for 
Uj at the previous update. 


u r = s[(l — e)qB^Q 1 (C Bu* - d ) 

A (19) 

-(nH-i mxm )u r ]=/(u r ). 


Furthermore, the fixed-point iteration 


uf } = /(uf x) ), k = 1, 2, .... Vu<°> e R m (20) 


converges to tlie unique solution of tlie quadratic 
programming problem from any initial guess u[ 0) . 

Note that the unconstrained solution (eq. (16)) is just 
a special case of equation (19) when none of the 
components of the saturator s in equation ( 19) is active. 
In such a case, s [ 'Q ] = therefore, equation (19) 
simply reduces to equation (16). 

The fixed-point iteration algorithm (eq. (20)) is 
particularly suited for onboard implementation. If the 
initial guess u is chosen to be the solution of the 
quadratic programming problem in the previous control 
update cycle, the current u r should be obtained in just a 
few iterations from equation (20). 

A similar constrained optimization problem was 
formulated in reference 2 for redistributing control 
surfaces after a hardware failure. Although simulations 
showed good performance, the computation 
requirement using a standard algorithm was deemed to 
be too intensive for onboard implementation. The 
control system commands could not be guaranteed 
before the next update cycle was required for the flight 
control computer. These concerns appear' to be 
satisfactorily addressed by the current algorithm. 


Reconfigurable Entry Flight Control 
Designs for tlie X-33 Vehicle 

As previously mentioned, the X-33 vehicle is a one- 
half-scale suborbital prototype for the proposed single- 
stage-to-orbit reusable launch vehicle proposed by 
Lockheed Martin Corporation (Burbank, California) 
that will be called the VentureStar. In flight tests, tlie 
X-33 vehicle will accelerate to a maximum speed of 
Mach 13 and climb to an altitude of approximately 
250k ft (fig. 1). The X-33 vehicle relies on engine thrust 
vectoring and aerosurfaces during tlie ascent phase. 
During the entry phase, the X-33 vehicle will be 
controlled by aerosurfaces and reaction control jets. 

During the ascent phase, only marginal benefits of 
reconfiguration were shown because tlie corrective 
forces of which the engine thrust vectoring is capable 
can overcome any failed surface position. This study 
presents results from the entry phase because 
reconfiguration has been shown to have the greatest 
payoff or benefits during entry. The appendix provides 
the linearized dynamic model and related trim 
conditions of the X-33 vehicle at the critical entry 
condition of Mach 3.13. This operating point will be 
used to demonstrate the two design approaches 
introduced in preceding sections because this flight 
condition is a critical, unstable lateral-directional point. 

Both the longitudinal and lateral-directional time 
histories will be shown because of coupling between 
axes following a surface failure. The plots show absolute 
control surface values (not the perturbation results). The 
analysis was performed using the Simulink software 
(The Math Works, Inc., Natick, Massachusetts). 9 


Note that this method accommodates both control 
surface amplitude and rate constraints. Suppose that the 
sampling time of the control system is At and the rate 
limit for the j 111 surface is li , in addition to the 

J III <1 A j 

O J 

amplitude constraint (eq. (15)). The only modifications 
will be to redefine the bounds of the saturator (eq. (17)) 
at each t by 


Determination of Trimmable Jam 

Before proceeding with the reconfigurable control 
design, determining whether the aircraft can still be 
retrimmed with a particular aerosurface jammed at a 
given position is helpful. Rewrite the postfailure aircraft 
model as 

x = Ax + B ; .u r + bgS, (23) 
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where (as before) 8 is the jammed surface position, B ( 
is the postfailure B matrix, u r is the remaining control 
surfaces, and bg is the sensitivity vector corresponding 
to the jammed surface. Let y e R represent the three 
body angular (roll, yaw, and pitch) rates of the vehicle, 
and y = C r x . Clearly, 

y = C r Ax + C r B r u r +C r b 8 5. (24) 


To find the range of jammed positions of the surface 8 
for which retrimming is possible, solve the following 
linear programming problem: 

min 8 (or max 8) 

u r , 8 u r , 8 (25) 

subject to 

C,.B,.u r + C,b g 8 = 0 (26) 


u < u < u 

min max ’ 


(27) 


T T 

where u = (u 8) . The solution of the linear 
programming problem (eqs. (25) — (27)) gives the 
minimum (most negative) or maximum jammed 
position of 8 that can be balanced, from the trim 
condition, by the remaining aerosurfaces u within their 
deflection limits. The perturbation values must be added 
to the trim surface positions for absolute aerosurface 
limit constraints. This range bounds the limits within 
which the reconhgurable control system can still 
possibly stabilize the vehicle. 


Applying this technique to the X-33 model in the 
appendix, engineers found that for any jammed position 
within the physical limits of all aerosurfaces except the 
flaps, the vehicle can potentially be retrimmed. For a 
jammed body flap, however, retrimming was found to 
be only possible between 8 ^ = -8.74° and 
8 |nax = 8.46° because the body flaps are the dominant 
aerosurfaces for pitch control, and other aerosurfaces 
cannot adequately compensate for one of the flaps 
jammed at a position far from the trim position. The 8 
values must be added to the trim values to obtain the 
absolute values. 


The aircraft not only has to be trimmable but must 
also be maneuverable and controllable. Therefore, when 
commands need to be tracked, the range of trimmable 
body flap jammed positions (for which reconfiguration 
is possible) will be even smaller than the range found 


above because tracking of the commands requires 
additional deflections of the remaining aerosurfaces. 

Robust Servomechanism Design Results 

Following the method in the Robust Servomechanism 
Reconfigurable Design Problem section, engineers can 
design a Pi-servo reconfigured control system for each 
jammed surface. The three outputs chosen to be 
commanded are roll angle, <]>, sideslip angle, [), and 
angle of attack, a. 

The |) command is normally 0° for coordinated flight. 
Although the linearized longitudinal and lateral- 
directional dynamics are decoupled in the system matrix 
A, all the control surfaces contribute to both longitudinal 
and lateral dynamics to different extents. Therefore, the 
control design is carried out simultaneously for both 
longitudinal and lateral modes. In design of the feedback 
proportional -plus-integral control law, the forward 
velocity is ignored because it has negligible effect on 
the response. Assume constant commands <j) cmd , 
Pcmd» mid a cmd- , With y = (<t) P a)' and 
r = (‘Pcmd Pcmd a cmd) r ’ the controller dynamics 
(eq. (5)) are now 

*cl — ^crnd _ 

*c2 = P«nd-P (28) 

*c3 = a cmd- a - 

For each jammed surface, the remaining seven 
surfaces and the eight vehicle states (excluding the 
forward velocity) plus the three integrator states 
(eq. (28)) constitute the augmented system (eq. (8)). 
This augmented system is controllable. A linear 
quadratic regulator control law for the augmented 
system, which is a proportional-plus-integral control 
law for the X-33 vehicle in the form of 

u r = K x x + M ( ^cmd-<P) d ' 

+ k p\(hmd-& dt + k aj( a cmd- a ) dt ’ 

T 

can be easily designed, where x=(prp())(paq0) . 
Engineers have found that for any single jammed surface 
except the flaps, a single set of gains is adequate to 
handle any jammed position within the deflection limits. 
No scheduling of the gains with respect to the jammed 
position is necessary (from Mach 10.0 to Mach 0.3). For 
a jammed flap in the range of [-8.7°, 8.5°], a single set of 
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gains are adequate for stabilizing (retrimming) the X-33 
vehicle. With command tracking, the body flap range is 
small, depending on the amplitudes of the commands 
because of rate and surface saturation. This range cannot 
be increased by any gain scheduling with respect to the 
jammed flap position because this range is the physical 
limit for the X-33 vehicle to retrim because of the large 
aerodynamic effectiveness of the body flap for which 
reconfiguration must compensate. 

Figures 2^4 show the time histories of the failure case 
of a runaway left inboard elevon that starts at t = 0 and 
jams at -15°. A longitudinal and lateral-directional 
guidance command hacking step input starts at t = 1 . 
The guidance commands are for simultaneous hacking 
of angle-of-attack and roll angle commands during the 
failure because maneuvers in both axes are demanding 
of the reconfigurable control system. Sideslip angle 
command remains at 0.0° for all the test cases. Figure 2 
shows the commands and the resulting responses. The 
Pi-servo controller hacks the commanded angle of 
attack of 8° and the roll angle of 10° well. Figure 3 
shows the left surface positions and figure 4 shows the 
right surface positions plotted. 



Time, sec 


990115 


Figure 3. X-33 surface deflections using the Pi-servo 
method with left inboard elevon jammed at -15° (left 
side control surfaces). 





Time, sec 


990116 


Figure 2. X-33 response using the Pi-servo method with Figure 4. X-33 surface deflections using the Pi-servo 
left inboard elevon jammed at -15°. method with left inboard elevon jammed at -15° (right 

side control surfaces). 
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As shown in figures 2 — 4, the Pi-servo control 
approach is found to work well for an elevon jammed at 
-15°. Figures 5-7 show how well the Pi-servo controller 
with the failure works compared to the nominal 
controller without a failure. Note that the nominal 
controller with an elevon jammed at -15° is unstable 
and departs very soon after the failure, and as such is not 
plotted, hi further studies, the Pi-servo control approach 
worked well for any of the six aerosurfaces except the 
flaps. The flap Pi-servo results are not presented in this 
paper because of length constraints. 


a, 

deg 


deg 


P. 

deg 


Nominal controller response 
Command 


— Pl-servo response 




0 5 10 15 


Time, sec 


990117 


Figure 5. Comparison response using the Pi-servo 
method with left inboard elevon jammed at— 15° and the 
nominal controller without a failure. 


For the jamming of one of the flaps not far from the 
nominal trim position, the Pi-servo control system 
performs well. Only when a flap is jammed at a position 
near its limits of retrimmable range does the 
performance of the reconfigured Pi-servo control 
system begin to degrade considerably. 
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Figure 6. Comparison response using the Pl-servo 
method with left inboard elevon jammed at -15° and the 
nominal controller without a failure (left side control 
surfaces). 


Control-Allocation Design Results 

Figures 8-10 show comparisons of the CA method 
and the Pl-servo approach for the case where the right 
body flap is jammed at -5°. Figure 8 shows the angle- 
of-attack, roll angle, and sideslip angle response; 
figures 9 and 10 show the aerosurface positions using 
the two methods. Again, the examples presented are for 
simultaneous tracking of angle-of-attack and roll angle 
commands during the failure. Figures 11-13 show the 
comparison of the responses for a right body flap 
jammed at 5° under the CA and Pl-servo control 
approaches, respectively. These two cases show what 
happens when the same surface fails but in opposite 
directions. 

The comparisons are noteworthy, particularly in 
longitudinal (a) response, where the jammed flap 
causes significant overshoot/undershoot in angle of 
attack under the Pl-servo controller. Conversely, the CA 
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Figure 7. Comparison response using the Pi-servo method Figure 9. Comparison response using the Pi-servo 

with left inboard elevon jammed at -15° and nominal method with right body flap jammed at -5° (left side 

controller without a failure (right side control surfaces). control surfaces). 
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Figure 8. Response with jammed right body flap, 




Figure 10. Comparison response using the Pl-servo 
method with right body flap jammed at -5° (right side 
control surfaces). 
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Figure 11. Response with jammed right body flap, 
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Figure 12. Comparison response using the Pi-servo 
method with right body flap jammed at 5° (left side 
control surfaces). 


CA reconfiguration 
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Figure 13. Comparison response using the PI -servo 
method with right body flap jammed at 5° (right side 
control surfaces). 


approach still provides a good response in these difficult 
cases. The CA reconfiguration responses (figs. 8 and 1 1) 
for the two different failures are very similar 

The CA approach was found to provide uniformly 
good performances for all the failure (jamming) cases in 
which stabilization and command tracking are possible 
with the remaining aerosurfaces. In the challenging 
situations where a body flap is a runaway and jammed, 
the CA approach yields a similar good performance for 
any jammed position of a body flap in the incremental 
range of [-8°, 8°]. When the flap jammed position is 
outside this range, the performance deteriorates rapidly 
and eventually instability occurs because some of the 
remaining operable surfaces become severely saturated 
when trying to counter the jammed flap. On a side note, 
investigation of the failed tune histories and the control 
surface positions shows that when a surface fails, its 
companion surface seems to be offset to approximately 
the same position. 
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Concluding Remarks 

Two methods for design of reconfigurable flight 
control systems have been presented. One method is 
based on a robust servomechanism design (Pi-servo) 
methodology. For the failure cases involving a jammed 
surface, the robust servomechanism approach leads to a 
multiple input-multiple output proportional-plus- 
integral control system. The other method uses a 
control-allocation (CA) scheme to redistribute the 
operable control surfaces to cancel the influence of the 
jammed surface and still provide desired control 


moments and forces to the aircraft. A globally 
convergent, simple, fixed-point algorithm is developed 
for onboard implementation of the method. Applications 
of both approaches to reconfigurable entry flight control 
of tite X-33 vehicle demonstrate the potential of the two 
methods. Although the first method is the simpler of the 
two, the second method appears to offer uniformly good 
performance at a cost of requiring slightly higher 
computation. All of the examples presented demonstrate 
the ability of both methods to stabilize the vehicle and 
provide adequate response to simultaneous angle-of- 
attack and roll angle commands. 
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Appendix 

Linearized Model of the X-33 Vehicle 


state. The linearized dynamics of the X-33 vehicle at the 
above flight conditions are given by 


The following is a linearized model of the X-33 
vehicle near' the terminal area energy management 
interface in entry flight. The flight conditions are: 
weight = 78,593 lbm, height = 97,167 ft, speed = 
Mach 3.13, trim angle of attack = 6.23°, trim = 0.922°, 
and trim roll angle = trim sideslip angle = 0. Let 


u = (8 8, 8 , ,8,,,S 8, 8 8, ) 

v rexi lew rbj Ibj rxr hr rexo lexo' 


(A-l) 


with 


x = Ax + Bu, 


A = 10 3 x 



0 

A lon 


(A-2) 


(A- 3) 


be the control surface perturbations from the trim 
values, where 


8 ,8, . 
ren’ len 

= right and left inboard elevons; 

8 rfc/’ 5 /fc/ 

= right and left body flaps; 

s nr , s /vr 

= right and left rudders; and 

8 ,8, 
rexo ’ lexo 

= right and left outboard elevons. 


Mat 


-96.95 28.11 673.08 0 0 

4.42 -34.78 -936.95 0 0 

-0.019 -999.94 -36.18 10.27 -0.95 

io 3 0 0 0 0 


(A-4) 


0 10 3 0 0 0 


All the control surface deflections are in degrees. The 
surface trim values are 2.4552° for the body flaps, 0.0° 
for the inboard and outboard elevons, and 0° for the A i 0 n 
rudders. Let the perturbations from the trim conditions 
be x = (p r |i c[) (p a q 0 v) , where the standard 
notation and English system are used for the aircraft 


-70.55 1000.29 0.954 0.038 

-1546.31 -52.24 0 -0.046 

0 10 3 0 0 
-550.04 0 -559.09 -13.375 


(A-5) 


B = 


-0.2137 0.2137 -0.8418 0.8418 0.0115 

0.0448 -0.0448 0.3639 -0.3639 -0.0077 
-0.0001 0.0001 0.0003 -0.0003 0 

0 0 0 0 0 
0 0 0 0 0 
-0.0003 -0.0003 -0.0017 -0.0017 0.000004 
-0.0617 -0.0617 -0.5393 -0.5393 0.0050 
0 0 0 0 0 
-0.0034 -0.0034 -0. 1285 -0. 1285 0.001 1 


0.0115 -0.2612 0.2621 

-0.0077 0.0548 -0.0548 

0 - 0.0002 0.0002 
0 0 0 
0 0 0 
-0.000004 -0.0004 0.0004 
-0.0050 -0.0754 0.0754 
0 0 0 
-0.0011 -0.0041 -0.0041 


(A-6) 
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